CVE-2010-3128 Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse...
HighCVSS 9.3
EPSS 8.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamviewer | <= 5.0.8703 | No fix listed |
| teamviewer | = 1.85 | No fix listed |
| teamviewer | = 2.44 | No fix listed |
| teamviewer | = 3.6.5523 | No fix listed |
| teamviewer | = 4.1.8107 | No fix listed |
References
- 41112 third-party-advisory vendor-advisory
- 14734 exploit
- 20100825 TeamViewer <= 5.0.8703 DLL Hijacking Exploit (dwmapi.dll) mailing-list
- ADV-2010-2174 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:6773 signature vdb-entry